Whitelisted messages tagged as spam

Kevin Miller Kevin_Miller at CI.JUNEAU.AK.US
Thu Jul 15 22:05:29 IST 2004


I'm puzzled.  I have messages that I've whitelisted landing in my spam
account.

A snippet of the headers:

X-CBJ-MailScanner-SpamCheck: spam, SpamAssassin (score=6.303, required 5,
        BAYES_01 -1.52, BigEvilList_305 3.00, DCC_CHECK 2.91,
        HTML_60_70 0.11, HTML_MESSAGE 0.10, HTML_WEB_BUGS 0.34,
        MIME_HTML_ONLY 0.32, MSGID_FROM_MTA_HEADER 0.70, ORDER_NOW 0.35)
X-CBJ-MailScanner-SpamScore: ssssss
X-MailScanner-From:
owner-nolist-alaska_gen-1922*paulette_sill**mail*-ci*-juneau*-ak*-us at airemot
e1.aif1.com

And in spam.whitelist.rules I have:
From:           *@airemote?.aif1.com            yes

If I understand it correctly, MailScanner looks at the envelope To: which is
displayed in the X-MailScanner-From header.  Any clues what went wrong here?
(Those are tabs in the whitelist file.)

Really odd thing is, about about 15 came in, but six or seven got stepped
on.  The rest were delivered presumably.  (I confirmed one.) They were
virtually identical, except for the the "Dear so and so" part and some air
mile details. (The message is a monthly milage award newsletter; really one
big ad, with about a half dozen lines tailered for the recipient.)

>From /var/log/mail

Jul 15 11:15:25 mis-mxg-lnx sendmail-in[18433]: i6FJF2H7018433:
from=<OWNER-NOLIST-Alaska_Gen-1922*PAULETTE_SILL**MAIL*-CI*-JUNEAU*-AK*-US at A
IREMOTE1.AIF1.COM>, size=40821, class=0, nrcpts=1,
msgid=<200407151915.i6FJF2H7018433 at mis-mxg-lnx.ci.juneau.ak.us>, proto=SMTP,
daemon=MTA, relay=airemote1.aif1.com [208.45.250.252]
Jul 15 11:15:25 mis-mxg-lnx sendmail-in[18433]: i6FJF2H7018433:
to=<PAULETTE_SILL at MAIL.CI.JUNEAU.AK.US>, delay=00:00:02, mailer=esmtp,
pri=30715, stat=queued
Jul 15 11:15:33 mis-mxg-lnx sendmail[18561]: i6FJF2H7018433:
to=<alphonse_spamdog at ci.juneau.ak.us>, delay=00:00:10, xdelay=00:00:00,
mailer=esmtp, pri=120715, relay=[199.58.55.120] [199.58.55.120], dsn=2.0.0,
stat=Sent (OK)

I'm on MailScanner 4.29-7 with sendmail on this box.

Thanks...

...Kevin
--
Kevin Miller                Registered Linux User No: 307357
CBJ MIS Dept.               Network Systems Administrator, Mail
Administrator
155 South Seward Street     ph: (907) 586-0242
Juneau, Alaska 99801        fax: (907 586-4500

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html



More information about the MailScanner mailing list